Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

MyCO Guestbook admin folder exposed, enabling remote actions

CVE-2006-0500 · published 20 years ago
Summary

The MyCO Guestbook version 1.0 places its admin directory in a publicly reachable web folder without proper restrictions. This allows anyone on the internet to request admin files directly and potentially perform privileged actions. Move the admin files out of the public area and apply proper access controls to block unauthorized access.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
punctweb myco_guestbook 1.0
cpe:2.3:a:punctweb:myco_guestbook:1.0:*:*:*:*:*:*:*
Original advisory text
MyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient access control, which allows remote attackers to perform unspecified privileged actions by directly acces...
MyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient access control, which allows remote attackers to perform unspecified privileged actions by directly accessing files via a URL.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
1% chance of attack within 30 days
Timeline
Published1 Feb 2006
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2006-0500 · NVD
Track software like this
Free during beta